Got this email recently, telling me:

You have received this email because we have strong reason to believe that your eBay account had been recently compromised. In order to prevent any fraudulent activity from occurring we are required to open an investigation into this matter. To speed up this process, you are required to verify your eBay account by following the link below.

The link displays as: https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&;favoritenav=&sid=&ruproduct=&pp=&co_partnerId=2&ru=&i1=&ruparams=&pageType=&pa2=&bshowgif=&pa1=&pUserId=&errmsg=&UsingSSL=&runame=&siteid=0

It actually goes to: http://newleb.siteburg.com/ebay/login.htm

The first screen asks for your username and password. I entered bogus information and was taken to the second page, which asks for my credit card info.

Nice. Other than the site address being clearly not ebay, this one is pretty well put together. The initial email has a lot of attributes that make it credible. It includes a person’s name, copyright, disclaimers, an address, and doesn’t include major grammatical or spelling mistakes. I could see a lot of people getting taken by this.

I hadn’t worried about phishing too much, but looks like it’s something to worry about.